subspace 3.0.12 → 3.0.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 935d4125d64c00864f60dbd6757b22e6be2ee7c96da64480b87178ad4c286dcb
-  data.tar.gz: ee223791b07e266cf51b77e2e706c400e3ec8729c61d48cd85987334a2ea7b48
+  metadata.gz: fd80f06bb8065ca4506d7b4d40c6e001f67b25c9aedf9a0ff513a099a23d98c9
+  data.tar.gz: 73eed74a49b776a5e465b57783eaabb7257fd8ea6fa49e0f3c4908c397409468
 SHA512:
-  metadata.gz: e88b7598daec4a79b50a36d6af5778fdcf7153d36caf9a1ee896a6a589b2bb1f190a8712b0e17af37fa4572a5048662565dc73b459e8e1630669d0291a3935e7
-  data.tar.gz: 611bcb89723ed8032622f7cd8a3c7bdc01238e9f1cb609ce4d7b381a9390d01bdd5cacf0d8612154ed7d42e30990b1e3c32febc212c6d73da85c17f68cdb59b9
+  metadata.gz: 962f2c5c22909b7a9b544cb67a97d70d281dab1afbd24d9873ece20e4d2c45a44449e3102e1bc703b8847bacf10b5b6aa4eeb89487b112034ddf562ad11c74eb
+  data.tar.gz: 6101675bde847ffd31133754fb41142214c1128200a8b5815cb90eb313c82e014cb4a117143d71ea402b0da6f60ceea17bd8bc9eb5b2c78b28843687fe819251

data/CHANGELOG.md

@@ -12,6 +12,9 @@ This project attempts to follow [semantic versioning](https://semver.org/).
 
 ## Unreleased
 
+## 3.0.13
+  * Allow tailscale to update itself again; bug that required known good version pinning in 3.0.10 has been resolved.
+
 ## 3.0.12
   * Bugfix: use `exist?`
 

data/README.md

@@ -480,6 +480,23 @@ This will install a monit script that keeps sidekiq running.  We spawn one sidek
 
 Sidekiq uses redis by default, and rails connects to a redis running on localhost by default.  However, this role does not depend on redis since in production it's likely redis will be running elsewhere.  If you're provisioning a standalone server, make sure to include the redis role.
 
+## tailscale
+
+This installs/updates the Tailscale package, and adds/authenticates servers to the 10FW Tailnet.
+
+**Prerequesites:**
+- Create an auth key within tailscale, appropriately tagged & granted ACL access for the given project.
+- Add `tailscale_auth_key` to the secrets vault for the environment you wish to provision.
+
+**Recommendations:**
+
+At the top of `config/subspace/{env}.yml`, add a separate block to allow the tailscale role to execute before all other roles. When the tailscale package is updated, the ssh connection will be broken, and it's best to get this out of the way first thing during a maintain or provision.
+
+**Force Reauthentication:**
+
+To force authentication with the tailnet, use the following tag when provisioning:
+
+    subspace provision {env} --tags=tailscale_reauth`
 
 ## Other Internal Roles
 

data/ansible/roles/tailscale/tasks/main.yml

@@ -18,6 +18,7 @@
       - tailscale_reauth
 
   - name: "Allow tailscale to be installed"
+    ignore_errors: yes
     dpkg_selections:
       name: tailscale
       selection: install
@@ -27,7 +28,7 @@
 
   - name: "Install tailscale from apt"
     apt:
-      name: tailscale=1.66.4
+      name: tailscale
       state: present
       allow_downgrade: true
       update_cache: yes
@@ -35,14 +36,6 @@
       - maintenance
       - tailscale_reauth
 
-  - name: "Prevent tailscale from being upgraded"
-    dpkg_selections:
-      name: tailscale
-      selection: hold
-    tags:
-      - maintenance
-      - tailscale_reauth
-
   - name: "Join the tailnet and force reauth"
     become: true
     command: tailscale up --ssh --auth-key={{tailscale_auth_key}} --hostname={{project_name | regex_replace('_', '')}}-{{hostname}} --accept-risk=lose-ssh {{tailscale_options}} --force-reauth

data/lib/subspace/version.rb

@@ -1,3 +1,3 @@
 module Subspace
-  VERSION = "3.0.12"
+  VERSION = "3.0.13"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: subspace
 version: !ruby/object:Gem::Version
-  version: 3.0.12
+  version: 3.0.13
 platform: ruby
 authors:
 - Brian Samson
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-11-11 00:00:00.000000000 Z
+date: 2024-12-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -313,7 +313,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.22
+rubygems_version: 3.5.23
 signing_key:
 specification_version: 4
 summary: Ansible-based server provisioning for rails projects